poc3

2026-08-15 23:43:58 +02:00
parent 71b6c0d86f
commit e8e5515e24
27 changed files with 861 additions and 64 deletions
@@ -26,6 +26,12 @@ START_SNIFFER=true
 # Suricata/app
 SURICATA_HOME_NET=[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]
 SURICATA_LOG_MAX_MB=512
+# Forensic PCAP: blocks (default), alerts, all, off
+FORENSIC_PCAP_MODE=blocks
+FORENSIC_PCAP_WINDOW_SECONDS=60
+FORENSIC_PCAP_MEMORY_MB=64
+FORENSIC_PCAP_MAX_FILES=32
+FORENSIC_PCAP_MAX_TOTAL_MB=512
 MONITORED_NETWORKS=192.168.0.0/16,10.0.0.0/8,172.16.0.0/12
 AUTO_BLOCK=false
 AUTO_BLOCK_MAX_SEVERITY=1